Skip to content

Commit 3008f9c

Browse files
authored
telemetry(IamPolicyChecks): create policy checks metrics (#735)
1 parent 0a68d85 commit 3008f9c

File tree

1 file changed

+105
-0
lines changed

1 file changed

+105
-0
lines changed

telemetry/definitions/commonDefinitions.json

Lines changed: 105 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -132,6 +132,20 @@
132132
],
133133
"description": "High level categorization indicating the cause of the error"
134134
},
135+
{
136+
"name": "cfnParameterFileUsed",
137+
"type": "boolean",
138+
"description": "Boolean value of whether or not a Cfn parameter file is provided."
139+
},
140+
{
141+
"name": "checkType",
142+
"type": "string",
143+
"allowedValues": [
144+
"CheckNoNewAccess",
145+
"CheckAccessNotGranted"
146+
],
147+
"description": "User inputted check type to denote which custom check to run."
148+
},
135149
{
136150
"name": "cloudWatchLogsPresentation",
137151
"allowedValues": [
@@ -837,6 +851,16 @@
837851
"type": "string",
838852
"description": "The id of the detector which produced the code scan issue"
839853
},
854+
{
855+
"name": "documentType",
856+
"type": "string",
857+
"allowedValues": [
858+
"CloudFormation",
859+
"Terraform Plan",
860+
"JSON Policy Language"
861+
],
862+
"description": "Document type of the edited file in IAM Policy Checks"
863+
},
840864
{
841865
"name": "duration",
842866
"type": "double",
@@ -989,6 +1013,11 @@
9891013
"type": "string",
9901014
"description": "The id of a security finding from a code scan"
9911015
},
1016+
{
1017+
"name": "findingsCount",
1018+
"type": "int",
1019+
"description": "Number of findings discovered after executing IAM Policy Checks"
1020+
},
9921021
{
9931022
"name": "framework",
9941023
"type": "string",
@@ -1038,6 +1067,16 @@
10381067
"type": "boolean",
10391068
"description": "Whether or not the deploy targets a new destination (true) or an existing destination (false)"
10401069
},
1070+
{
1071+
"name": "inputPolicyType",
1072+
"type": "string",
1073+
"allowedValues": [
1074+
"Identity",
1075+
"Resource",
1076+
"None"
1077+
],
1078+
"description": "User inputted policy type of the edited file. Applicable to only JSON Policy Language."
1079+
},
10411080
{
10421081
"name": "insightsDialogOpenSource",
10431082
"allowedValues": [
@@ -1139,6 +1178,16 @@
11391178
"type": "string",
11401179
"description": "The reason for a metric or exception depending on context. It describes a certain theme of errors usually the exception class name eg. FileIOException"
11411180
},
1181+
{
1182+
"name": "referencePolicyType",
1183+
"type": "string",
1184+
"allowedValues": [
1185+
"Identity",
1186+
"Resource",
1187+
"None"
1188+
],
1189+
"description": "User inputted policy type of the reference file. Applicable to only CheckNoNewAccess check type."
1190+
},
11421191
{
11431192
"name": "requestId",
11441193
"type": "string",
@@ -1324,6 +1373,62 @@
13241373
}
13251374
],
13261375
"metrics": [
1376+
{
1377+
"name": "accessanalyzer_iamPolicyChecksCustomChecks",
1378+
"description": "Execution of Custom Policy Checks in IAM Policy Checks",
1379+
"metadata": [
1380+
{
1381+
"type": "cfnParameterFileUsed"
1382+
},
1383+
{
1384+
"type": "checkType"
1385+
},
1386+
{
1387+
"type": "documentType"
1388+
},
1389+
{
1390+
"type": "findingsCount"
1391+
},
1392+
{
1393+
"type": "inputPolicyType"
1394+
},
1395+
{
1396+
"type": "reason",
1397+
"required": false
1398+
},
1399+
{
1400+
"type": "referencePolicyType"
1401+
},
1402+
{
1403+
"type": "result"
1404+
}
1405+
]
1406+
},
1407+
{
1408+
"name": "accessanalyzer_iamPolicyChecksValidatePolicy",
1409+
"description": "Execution of Validate Policy in IAM Policy Checks",
1410+
"metadata": [
1411+
{
1412+
"type": "cfnParameterFileUsed"
1413+
},
1414+
{
1415+
"type": "documentType"
1416+
},
1417+
{
1418+
"type": "findingsCount"
1419+
},
1420+
{
1421+
"type": "inputPolicyType"
1422+
},
1423+
{
1424+
"type": "reason",
1425+
"required": false
1426+
},
1427+
{
1428+
"type": "result"
1429+
}
1430+
]
1431+
},
13271432
{
13281433
"name": "amazonq_approachInvoke",
13291434
"description": "Captures Approach generation process",

0 commit comments

Comments
 (0)